This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/wSVDY4D_BTNkmAglY_HeZ285NQM.roa File: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (raw, json) Hash identifier: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8= Subject key identifier: C1:25:43:63:80:FF:05:33:64:98:08:25:63:F1:DE:67:6F:39:35:03 Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Certificate serial: 019B77C66E8B097E19E4E58E830A72ED0E25 Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/wSVDY4D_BTNkmAglY_HeZ285NQM.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 5.8.96.0/19 maxlen: 24 5.63.168.0/21 maxlen: 24 37.148.224.0/21 maxlen: 24 45.33.224.0/20 maxlen: 24 77.239.128.0/19 maxlen: 24 80.210.96.0/19 maxlen: 24 81.21.16.0/20 maxlen: 24 82.97.224.0/20 maxlen: 24 82.113.192.0/19 maxlen: 24 82.134.192.0/18 maxlen: 24 82.180.32.0/19 maxlen: 24 83.217.176.0/20 maxlen: 24 95.142.176.0/20 maxlen: 24 150.252.224.0/20 maxlen: 24 176.57.112.0/20 maxlen: 24 178.236.160.0/20 maxlen: 24 185.3.108.0/22 maxlen: 24 185.25.72.0/22 maxlen: 24 217.61.160.0/20 maxlen: 24 2a00:7ca0::/32 maxlen: 32 2a02:1630::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6e:8b:09:7e:19:e4:e5:8e:83:0a:72:ed:0e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c125436380ff05336498082563f1de676f393503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:80:a4:bc:de:0f:50:63:f5:88:57:36:8c: 63:e9:72:65:b5:42:fd:2d:78:89:bc:92:e8:b4:08: 5d:e2:96:59:00:07:e4:63:01:04:1a:da:e7:b3:c3: a6:45:8b:91:c4:bc:18:fe:49:91:7d:8b:a4:e3:45: 5c:4f:f6:c1:72:bf:07:f4:89:68:fd:15:d7:20:5d: 07:ae:c2:86:6e:3a:85:3d:1a:54:7a:8a:b0:f0:df: 5b:6a:3c:a7:38:cc:df:bf:0c:5f:09:14:c9:30:35: e8:e3:72:b2:70:bc:08:aa:64:07:d9:34:b8:35:89: 1c:81:f5:16:35:22:96:c8:5b:07:92:fa:e6:77:33: 49:7a:e0:22:8c:81:d1:05:22:da:b1:72:e2:53:b0: 76:22:e8:4f:d8:a5:a8:97:27:db:d5:ec:e1:2d:85: e2:00:64:32:f3:82:52:d3:ef:fe:96:c1:07:95:16: b2:3f:d2:f1:26:d6:5d:64:0d:9e:b0:d1:dd:b1:85: 41:50:e8:6c:69:3d:92:20:de:8c:27:43:4d:3d:b4: 39:2e:bf:24:1f:cf:fc:6d:6f:ff:4b:38:0d:a5:4e: 65:34:47:86:a9:13:07:f3:a6:40:c2:7b:a6:10:70: ed:5c:4e:0f:04:86:e2:65:cb:1c:ea:bd:24:74:5e: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:43:63:80:FF:05:33:64:98:08:25:63:F1:DE:67:6F:39:35:03 X509v3 Authority Key Identifier: keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/wSVDY4D_BTNkmAglY_HeZ285NQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.96.0/19 5.63.168.0/21 37.148.224.0/21 45.33.224.0/20 77.239.128.0/19 80.210.96.0/19 81.21.16.0/20 82.97.224.0/20 82.113.192.0/19 82.134.192.0/18 82.180.32.0/19 83.217.176.0/20 95.142.176.0/20 150.252.224.0/20 176.57.112.0/20 178.236.160.0/20 185.3.108.0/22 185.25.72.0/22 217.61.160.0/20 IPv6: 2a00:7ca0::/32 2a02:1630::/32 Signature Algorithm: sha256WithRSAEncryption 70:f4:f1:3e:9b:8a:7c:2f:b1:5e:89:5d:86:fc:38:91:c0:0c: e0:af:f3:bb:b9:d8:9c:4d:d7:ed:6e:de:cf:73:dd:cd:83:4b: 31:8a:61:88:d8:0b:f8:c1:df:74:a7:9b:1f:c4:9f:d2:c7:48: b9:c9:cf:3c:6f:40:b1:e7:29:dd:5d:69:42:77:76:ab:df:dc: cd:21:bf:14:51:9d:bf:7a:06:3f:68:8b:a5:99:a7:ad:a9:bb: cf:cd:02:fc:cd:e0:bb:f0:6e:00:f5:70:3d:6d:fb:25:49:da: 9f:75:af:67:8c:e4:f3:b8:a6:b6:c3:dc:1a:2b:c7:0e:46:7d: 19:0d:c1:06:1a:d4:dc:67:cf:5f:8f:2e:95:51:e1:55:97:34: cf:ea:37:33:f1:51:4b:ad:2c:23:5a:67:73:28:71:ab:96:f1: bf:d1:2d:aa:9e:24:a3:ee:fd:ba:b3:47:d5:12:c3:be:1a:e5: ce:40:98:af:17:b0:a1:c7:cf:98:a6:c2:79:a9:46:d2:36:8a: 55:16:21:5e:66:4a:a0:71:0d:a8:2b:46:a6:e1:30:8d:6f:2d: ab:8a:94:f3:72:8f:83:cb:11:c0:df:3e:c4:b5:31:c1:db:65: 44:c9:83:d3:c4:8d:40:bb:f0:c0:f3:cb:90:d4:91:aa:e0:42: c6:75:71:8c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZt3xm6LCX4Z5OWOgwpy7Q4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl M2I0NjIwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTI1NDM2MzgwZmYwNTMzNjQ5ODA4MjU2M2YxZGU2NzZmMzkzNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDSApLzeD1Bj9YhXNoxj6XJltUL9 LXiJvJLotAhd4pZZAAfkYwEEGtrns8OmRYuRxLwY/kmRfYuk40VcT/bBcr8H9Ilo /RXXIF0HrsKGbjqFPRpUeoqw8N9bajynOMzfvwxfCRTJMDXo43KycLwIqmQH2TS4 NYkcgfUWNSKWyFsHkvrmdzNJeuAijIHRBSLasXLiU7B2IuhP2KWolyfb1ezhLYXi AGQy84JS0+/+lsEHlRayP9LxJtZdZA2esNHdsYVBUOhsaT2SIN6MJ0NNPbQ5Lr8k H8/8bW//SzgNpU5lNEeGqRMH86ZAwnumEHDtXE4PBIbiZcsc6r0kdF4V+QIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFMElQ2OA/wUzZJgIJWPx3mdvOTUDMB8GA1UdIwQY MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt MDJlMWJkNjA1MGU1LzEvd1NWRFk0RF9CVE5rbUFnbFlfSGVaMjg1TlFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1 LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDB4BAIAATByAwQFBQhg AwQDBT+oAwQDJZTgAwQELSHgAwQFTe+AAwQFUNJgAwQEURUQAwQEUmHgAwQFUnHA AwQGUobAAwQFUrQgAwQEU9mwAwQEX46wAwQElvzgAwQEsDlwAwQEsuygAwQCuQNs AwQCuRlIAwQE2T2gMBQEAgACMA4DBQAqAHygAwUAKgIWMDANBgkqhkiG9w0BAQsF AAOCAQEAcPTxPpuKfC+xXoldhvw4kcAM4K/zu7nYnE3X7W7ez3PdzYNLMYphiNgL +MHfdKebH8Sf0sdIucnPPG9Asecp3V1pQnd2q9/czSG/FFGdv3oGP2iLpZmnram7 z80C/M3gu/BuAPVwPW37JUnan3WvZ4zk87imtsPcGivHDkZ9GQ3BBhrU3GfPX48u lVHhVZc0z+o3M/FRS60sI1pncyhxq5bxv9Etqp4ko+79urNH1RLDvhrlzkCYrxew ocfPmKbCealG0jaKVRYhXmZKoHENqCtGpuEwjW8tq4qU83KPg8sRwN8+xLUxwdtl RMmD08SNQLvwwPPLkNSRquBCxnVxjA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:43 2026 by rpki-client